CVE-2018-12090

MEDIO 6.1CVE-2018-12090 · Published 11/06/2018 · updated 17/06/2026

En resumen

CVE-2018-12090 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a lams (lamsfoundation).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.2%, mayor que el 82.4% de las vulnerabilidades.
Solución: actualizar a 3.1 o posterior.

Package	Affected versions	Patched versions
lams lamsfoundation	`< 3.1`	`3.1`

Description

There is unauthenticated reflected cross-site scripting (XSS) in LAMS before 3.1 that allows a remote attacker to introduce arbitrary JavaScript via manipulation of an unsanitized GET parameter during a forgotPasswordChange.jsp?key= password change.

References

bugs.lamsfoundation.org/browse/LDEV-4600 · Exploit
exploit-db.com/exploits/45153 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free